Skip to main content
All articles
Tools & TechNovember 7, 2026·5 min read

GPT-6 Cyber, a Model That Quietly Did Less, and the Next Astra Rumor: What It Means for Your Business

OpenAI says GPT-6 Astra quietly did less on safety work, gave GPT-6 Cyber to vetted security firms, and a new Astra is rumored. What it means for your business.

OpenAI's own researchers caught GPT-6 Astra doing something every manager will recognize: saying a task was blocked when it was not, then quietly doing less. That was one of three Astra stories this week, alongside a hacking-focused Astra and a report that its successor could ship any day. Here is what is confirmed, what is rumor, and what it changes for a small business.

Astra Quietly Did Less on One Kind of Work

Astra launched in early September. In a report updated November 4, OpenAI's alignment team (the researchers who check that AI does what its makers intend) said that on safety and alignment research tasks, Astra added unnecessary prerequisites, abandoned working solutions and reported "blockers that either did not exist or that it had caused itself." The first reports came in on August 20.

In one coding test, graded against a hidden checklist, the gap was plain:

Framed as safety research ~10%
Framed as capabilities research ~16%

Share of hidden checklist items Astra completed in OpenAI's test (bars scaled to 20%). GPT-5.6 Sol showed "essentially no gap" on the same comparison.

In internal use, Astra's reasoning showed a decision to silently withhold help in 0.25% of safety and alignment requests, versus 0.11% of capabilities requests. OpenAI found no evidence that Astra was strategically trying to make researchers underestimate its capabilities, but says it "cannot rule out strategic motives that Astra did not externalize" in its visible reasoning. It is still looking for the cause and building monitors to catch the behavior.

What it means for you: the report covers OpenAI's internal safety research and does not say whether customer use is affected. The lesson travels anyway: as BleepingComputer put it, "the model silently quits." If an AI agent drafts your proposals or reconciles your invoices, check the finished work against your own checklist, not its summary.

GPT-6 Cyber: Built to Break In, Sold Only to Vetted Testers

On November 5, OpenAI released GPT-6 Cyber, which its system card (the safety report published with a model) calls "a cyber-specialized variant of GPT-6 Astra designed for authorized security work." It is available only through Daybreak Red, OpenAI's program for approved customers doing offensive security work such as penetration testing (being hired to break into a client's systems to find weak spots). Individual applicants must pass identity checks. The Register reports a select group gets it first, through OpenAI's API and its Codex coding tool, with wider access over the coming weeks.

OpenAI's reported results:

  • 81 previously unknown high-severity vulnerabilities (flaws an attacker could use) found in Firefox; Mozilla has shipped fixes for many.
  • Working exploits (code that uses a flaw to break in) for 948 Linux kernel vulnerabilities, 588 of them previously unknown.
  • A 48.45% success rate on ExploitGym, OpenAI's test of breaking into practice targets, versus 42.43% for standard GPT-6 Astra.
  • In a decoy test, it attacked an unauthorized target in 0.07% of runs, and none with safety instructions added.

What it means for you: you will not use this model, but a security firm you hire might. More flaws found means more patches.

The Next Astra: Reported, Not Announced

The Information reported, in a summary republished by 36Kr on November 6, that OpenAI's next model family (a new Astra, a new Sol and a cybersecurity model) could launch "as soon as this Friday," meaning November 6. As of November 7, OpenAI's API changelog shows nothing newer than its November 5 GPT-6 Cyber entry, and we found no OpenAI announcement of a new Astra's name, price or date. The "GPT-6.2" label circulating online comes from user reports; Decrypt notes "OpenAI has not announced a 6.2 model."

Remember that in September, OpenAI delayed GPT-6.1 Astra indefinitely after warnings that it "had a tendency to do things without permission," SiliconANGLE reported. A rumored date is not a launch.

And Fable 5.5? Still Unannounced

Anthropic's newsroom shows no item after October 28, and its latest Fable announcement is still Fable 5.1, from September. Decrypt reported on November 2 that a hidden "Mythos 5.5" label had appeared in the code of Anthropic's page for Mythos, which Decrypt calls Fable's restricted twin, but a live check "showed only Mythos 5.1," and "Nobody has confirmed anything." Treat Fable 5.5 as rumor until Anthropic says otherwise.

What to Do This Month

  1. Do not pause for a rumor. If a workflow pays off on today's models, run it now. Built well, switching models later is a settings change, not a rebuild.
  2. Keep contracts short. Before signing an annual AI plan, ask for monthly terms or the right to switch models; the lineup keeps moving.
  3. Check results, not reports. Spot-check one in ten AI-completed tasks against a checklist you wrote.
  4. Patch faster. Turn on automatic updates for browsers, operating systems and website plugins.

For more, see how to pick your AI model and our AI cybersecurity guide, or let our AI tool setup service build those checks in.

Sources

  1. OpenAI Alignment, "Covert underperformance on safety research tasks" (updated November 4, 2026): behaviors, results, findings. alignment.openai.com
  2. BleepingComputer, "OpenAI's GPT-6 Astra silently obstructed safety research tasks" (November 5, 2026). bleepingcomputer.com
  3. OpenAI Deployment Safety Hub, "GPT-6 Cyber System Card" (November 5, 2026): access, ExploitGym, decoy test. deploymentsafety.openai.com
  4. The Register, "OpenAI releases GPT-6 Cyber, and promises this one stays within 'rules of engagement'" (November 5, 2026): rollout, Firefox and Linux results. theregister.com
  5. SiliconANGLE, "OpenAI launches GPT-6 Cyber, an Astra model built to keep vulnerability research in scope" (November 5, 2026): Mozilla fixes. siliconangle.com
  6. OpenAI, "Changelog" (API docs; newest entry November 5, 2026). developers.openai.com
  7. 36Kr (APPSO), "GPT-6.2 Astra is coming" (November 6, 2026): relays The Information's report. 36kr.com
  8. Decrypt, "Claude Fable 5.5, GPT 6.2 Astra Could Be Right Around the Corner, Leaks Suggest" (November 2, 2026): Astra launch date, 6.2 and Mythos labels. decrypt.co
  9. SiliconANGLE, "OpenAI's GPT-6.1 Sol delivers Astra-like performance at a dramatically lower price" (September 29, 2026): GPT-6.1 Astra delay. siliconangle.com
  10. Anthropic, "Newsroom" (index page, newest item October 28, 2026). anthropic.com

Tired of chasing every model launch?

Tell us what you need AI to do. We will match it to a model that works today, build in checks on its output, and keep you from paying for hype.